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Asynchronous Transfer Mode (ATM) and Frame-Relay 
Management Interface Definition 


Status of This Memo 


This document specifies an Internet standards track protocol for the 
Internet community, and requests discussion and suggestions for 


improvements. Please refer to the current edition of the "Internet 
Official Protocol Standards" (STD 1) for the standardization state 
and status of this protocol. Distribution of this memo is unlimited. 


Copyright Notice 
Copyright (C) The Internet Society (2006). 

Abstract 
This memo defines two MIB modules and corresponding MIB Object 
Definitions that describe how label-switching-controlled Frame-Relay 
and Asynchronous Transfer Mode (ATM) interfaces can be managed given 
the interface stacking as defined in the MPLS-LSR-STD-MIB and 
MPLS-TE-STD—-MIB. 
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Les 


Introduction 


This memo defines how label-switching-controlled Frame-Relay 
[RFC3034] and ATM [RFC3035] interfaces can be realized given the 
interface stacking as defined in the MPLS-LSR-STD [RFC3813] and 
MPLS-TE-STD [RFC3812] MIBs. This document also contains a MIB module 
that sparsely extends the MPLS-LSR-STD MIB’s mplsInterfaceConfTable 
in such a way as to identify which MPLS-type interfaces have LC-ATM 
or LC-FR capabilities. Comments should be made directly to the MPLS 
mailing list at mpls@uu.net. 


The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 
"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 
document are to be interpreted as described in RFC 2119, reference 
[RFC2119]. 


Terminology 


This document uses terminology from the document describing the MPLS 
architecture [RFC3031], as well as from RFC 3035 and RFC 3034. 
Specifically, the following terms will be used in this document. 


C-FR RFC 3034 defines a label-switching-controlled Frame Relay 
(LC-FR) interface. Packets traversing such an interface carry 
labels in the DLCI field 


C-ATM RFC 3035 defines a label-switching-controlled ATM (LC-ATM) 
interface as an ATM interface controlled by the label switching 
control component. When a packet traversing such an interface 
is received, it is treated as a labeled packet. The packet’s 
top label is inferred from either the contents of the Virtual 
Channel Identifier (VCI) field or the combined contents of the 
Virtual Path Identifier (VPI) and VCI fields. Any two LDP 
peers that are connected via an LC-ATM interface will use LDP 
negotiations to determine which of these cases is applicable to 
that interface. Static configuration of labels is also 
possible. 


When LDP is used to distribute labels for use on label-controlled 
interfaces, label configuration information may be available in the 
MPLS-LDP-ATM-STD-MIB [RFC3815] when LC-ATM interfaces are used, or 
the MPLS-LDP-FRAME-RELAY-STD-MIB [RFC3815] when LC-FR interfaces are 
used. 
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3. The SNMP Management Framework 


For a detailed overview of the documents that describe the current 
Internet-Standard Management Framework, please refer to section 7 of 
RFC 3410 [RFC3410]. 


Managed objects are accessed via a virtual information store, termed 
the Management Information Base or MIB. MIB objects are generally 
accessed through the Simple Network Management Protocol (SNMP). 
Objects in the MIB are defined using the mechanisms defined in the 
Structure of Management Information (SMI). This memo specifies a MIB 
module that is compliant to the SMIv2, which is described in STD 58, 
RFC 2578 [RFC2578], STD 58, RFC 2579 [RFC2579] and STD 58, RFC 2580 
[RFC2580]. 


4. Interface Stacking of LC-ATM 


Since LC-ATM interfaces [RFC2863] can carry labeled MPLS traffic, 
they too are considered MPLS subinterfaces with ifType = mpls(166). 
They differ slightly in their capability from a packet-oriented MPLS 
interface in that they may carry ATM- or Frame-Relay-encapsulated 
traffic. It is thus beneficial to identify them as such. To do 
this, two tables are defined that extend the MPLS-LSR-STD MIB’s 
mplsInterfaceTable (see section 5 for LC-ATM or section 6 for LC-FR). 


Die Structure of the MPLS-LC-ATM-STD-MIB Module 


The MPLS-LC-ATM-STD-MIB module is structured simply as a table of 
entries that sparsely extend those found in the interfaces table. In 
particular, the entries in the mplsLcAtmStdInterfaceConfTable extend 
interfaces capable of supporting MPLS, as is defined in [RFC3813], to 
include entries that also support LC-ATM (and their unique 
attributes). Therefore, the module can be visualized as follows. 
Note that the ifTable comes from [RFC2863], the mplsInterfaceTable 
from [RFC3813], and the mplsLcAtmStdInterfaceConfTable from the 
MPLS-LC-ATM-STD-MIB module described below. 


ifTable mplsInterfaceTable mplsLcAtmStdInterfaceConfTable 
sd 
.2 


U eA WN 
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In the example shown above, five interfaces exist on the device in 
question. Of those interfaces, those with ifIndex = .2 and .4 are of 
ifType = mpls(166) indicating that they are capable of MPLS. Of 
those two, the entry with index .4 is capable of MPLS LC-ATM 
operations. 


Note that the label partition model utilized by the authors of this 
document reflects widespread implementation and is seen by the MPLS 
working group as sufficiently flexible to meet the operational needs, 
even if it is more restrictive than [RFC3035] allows. To this end, 
we have limited the control and unlabeled VPI and VCI to single 
values. Note that mplsLcAtmStdUnlabTrafVci and mplsLcAtmStdCtrlVci 
MUST not be equal; nor should mplsLcAtmStdCtrlVpi or 
mplsLcAtmStdUnlabTrafVpi be equal. 


6. Structure of the MPLS-LC-FR-STD-MIB Module 


The MPLS-LC-FR-STD-MIB module is structured simply as a table of 
entries that sparsely extend those found in the interfaces table. In 
particular, the entries in the mplsLcFrStdInterfaceConfTable extend 
interfaces capable of supporting MPLS, as is defined in [RFC3813], to 
include entries that also support LC-Frame Relay (and their unique 
attributes). Therefore, the module can be visualized as follows. 
Note that the ifTable comes from [RFC2863], the mplsInterfaceTable 
from [RFC3813], and the mplsLcAtmStdInterfaceConfTable from the 
MPLS-LC-FR-STD-MIB module described below. 


ifTable mplsInterfaceTable mplsLcFrStdInterfaceConfTable 
el 
a2 


Oe WN 


In the example shown above, five interfaces exist on the device in 
question. Of those interfaces, those with ifIndex = .2 and .4 are of 
ifType = mpls(166) indicating that they are capable of MPLS. Of 
those two, the entry with index .4 is capable of MPLS LC-Frame Relay 
operations. 


Note that even though the architecture as described in [RFC3034] 
calls for supporting mixed labeled and unlabeled traffic, this MIB 
does not support that, as this capability does not seem to be used 
operationally. Note that the DLCI ranges represented by 
mplsLcFrStdTrafficMinDlci to mplsLcFrStdTrafficMaxDlci and 
mplsLcFrStdCtrlMinDlci to mplsLcFrStdCtrlMaxDlci MUST not overlap. 
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7. MPLS Label-Controlled ATM MIB Definitions 


The following MIB module imports from [RFC2514], [RFC3811], and 
[RFC3813]. 


MPLS-LC-ATM-STD-MIB DEFINITIONS ::= BEGIN 
IMPORTS 
MODULE-IDENTITY, OBJECT-TYPE 
FROM SNMPv2-SMI 
MODULE-COMPLIANCE, OBJECT-GROUP 
FROM SNMPv2-CONF 
RowStatus, StorageType, TruthValue 
FROM SNMPv2-TC 
AtmVpIdentifier 
FROM ATM-TC-MIB 
mplsStdMIB, MplsAtmVcIdentifier 
FROM MPLS-TC-STD-MIB 
mplsInterfaceIndex 
FROM MPLS-LSR-STD-MIB 


£ 


mplsLcAtmStdMIB MODULE-IDENTITY 
LAST-UPDATED "200601120000Z" -- 12 January 2006 
ORGANIZATION "Multiprotocol Label Switching (MPLS) Working Group" 
CONTACT-INFO 
” Thomas D. Nadeau 
Postal: Cisco Systems, Inc. 
250 Apollo Drive 
Chelmsford, MA 01824 
Tel: +1-978-244-3051 
Email: tnadeau@cisco.com 


Subrahmanya Hegde 

Postal: Cisco Systems, Inc. 
225 East Tazman Drive 

Tel: +1-408-525-6562 

Email: subrah@cisco.com 

General comments should be sent to mpls@uu.net 

" 

DESCRIPTION 

"Ihis MIB module contains managed object definitions for 

MPLS Label-Controlled ATM interfaces as defined in 

[RFC3035]. 


Copyright (C) The Internet Society (2006). This 


version of this MIB module is part of RFC 4368; see 
the RFC itself for full legal notices." 
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-—- Revision history. 
REVISION 
"200601120000Z" -- 12 January 2006 
DESCRIPTION 
"Initial revision, published as part of RFC 4368." 
::= { mplsStdMIB 9 } 


-- Top level components of this MIB module. 
-- Tables, Scalars, Notifications, Conformance 


mplsLcAtmStdNotifications OBJECT IDENTIFIER ::= { mplsLcAtmStdMIB 0 } 


mplsLcAtmStdObjects OBJECT IDENTIFIER { mplsLcAtmStdMIB 1 } 


mplsLcAtmStdConformance OBJECT IDENTIFIER { molsLcAtmStdMIB 2 } 


-—- MPLS LC-ATM Interface Configuration Table. 
mplsLcAtmStdInterfaceConfTable OBJECT-TYPE 


SYNTAX SEQUENCE OF MplsLcAtmStdiInterfaceConfEntry 
MAX-ACCESS not-accessible 
STATUS current 
DESCRIPTION 
"This table specifies per-interface MPLS LC-ATM 
capability and associated information. In particular, 


this table sparsely extends the MPLS-LSR-STD-MIB’s 
mplsInterfaceConfTable." 
::= { mplsLcAtmStdObjects 1 } 


mplsLcAtmStdInterfaceConfEntry OBJECT-TYPE 


SYNTAX MplsLcAtmStdInterfaceConfEntry 
MAX-ACCESS not-accessible 

STATUS current 

DESCRIPTION 


"An entry in this table is created by an LSR for 
every interface capable of supporting MPLS LC-ATM. 
Each entry in this table will exist only if a 
corresponding entry in ifTable and mplsInterfaceConfTable 
exists. If the associated entries in ifTable and 
mplsInterfaceConfTable are deleted, the corresponding 
entry in this table must also be deleted shortly 
thereafter." 

INDEX { mplsInterfaceIndex } 
:= { mplsLcAtmStdInterfaceConfTable 1 } 


MplsLcAtmStdInterfaceConfEntry ::= SEQUENCE { 
mplsLcAtmStdCtrlVpi AtmVpIdentifier, 
mplsLcAtmStdCtrlVci MplsAtmVcIdentifier, 
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mplsLcAtmStdUnlabTrafVpi 
mplsLcAtmStdUnlabTrafVci 
mplsLcAtmStdVcMerge 
mplsLcAtmVcDirectlyConnected 
mplsLcAtmLcAtmvVPI 
mplsLcAtmStdIfConfRowStatus 
mplsLcAtmStdIfConfStorageType 


mplsLcAtmStdCtrlVpi OBJECT-TYPE 


SYNTAX AtmVpIdentifier 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


MPLS LC ATM and FR MIBs 


January 2006 


AtmVpIdentifier, 
MplsAtmVcIdentifier, 
TruthValue, 
TruthValue, 
AtmVpIdentifier, 
RowStatus, 
StorageType 


"This is the VPI value over which this 
LSR is willing to accept control traffic on 


this interface." 


::= { mplsLcAtmStdInterfaceConfEntry 1 } 


mplsLcAtmStdCtrlVci OBJECT-TYPE 


mplsLcAtmStdUnlabTrafVpi OBJECT-TYPE 


mplsLcAtmStdUnlabTrafVci OBJECT-TYPE 


Nadeau & Hegde 


SYNTAX MplsAtmVcIdentifier 
MAX-ACCESS read-create 

STATUS current 

DESCRIPTION 


"This is the VCI value over which this 
LSR is willing to accept control traffic 


on this interface." 


::= { mplsLcAtmStdInterfaceConfEntry 2 } 


SYNTAX AtmVpIdentifier 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"This is the VPI value over which this 
LSR is willing to accept unlabeled traffic 


on this interface." 


::= { mplsLcAtmStdInterfaceConfEntry 3 } 


SYNTAX MplsAtmVcIdentifier 
MAX-ACCESS read-create 

STATUS current 

DESCRIPTION 


"This is the VCI value over which this 
LSR is willing to accept unlabeled traffic 


on this interface." 


::= { mplsLcAtmStdInterfaceConfEntry 4 } 
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mplsLcAtmStdVcMerge OBJECT-TYPE 


SYNTAX TruthValue 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"Tf set to true(l1), 


is capable of ATM VC merge; 


be set to false(2)." 
DEFVAL { false } 


MPLS LC ATM and FR MIBs 


indicates that this interface 


otherwise, it MUST 


::= { mplsLcAtmStdInterfaceConfEntry 5 } 


mplsLcAtmVcDirectlyConnected OBJECT-TYPE 


SYNTAX TruthValue 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"This value indicates whether 
or indirectly (by means of a 


true(1), indicates that this 
connected LC-ATM; otherwise, 
false(2). 


an LC-ATM is directly 

VP) connected. If set to 
interface is directly 

it MUST be set to 


Note that although it can be intimated 


from RFC 3057 that multiple VPs may be used, 


in practice only a single one is used, 


and therefore 


the authors of this MIB module have chosen to model 


it as such." 
DEFVAL { true } 


::= { mplsLcAtmStdInterfaceConfEntry 6 } 


mplsLcAtmLcAtmVPI OBJECT-TYPE 


SYNTAX AtmVpIdentifier 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"This is the VPI value used for indirectly 


connected LC-ATM interfaces. 
interfaces, the VPI field is 
available to MPLS, 


For these 
not 


and the label MUST be 


encoded entirely within the VCI field 


(see [RFC3035]). 


If the interface is directly 


connected, this value MUST be set to zero." 


DEFVAL { 0 } 


::= { mplsLcAtmStdInterfaceConfEntry 7 } 


mplsLcAtmStdIfConfRowStatus OBJECT-TYPE 


SYNTAX RowStatus 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 
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"This object is used to create and 
delete entries in this table. When configuring 
entries in this table, the corresponding 
ifEntry and mplsInterfaceConfEntry 
MUST exist beforehand. If a manager attempts to 
create an entry for a corresponding 
mplsInterfaceConfEntry that does not support LC-ATM, 
the agent MUST return an inconsistentValue error. 
If this table is implemented read-only, then the 
agent must set this object to active(1l) when this 
row is made active. If this table is implemented 
writable, then an agent MUST not allow modification 
to its objects once this value is set to active(1), 
except to mplsLcAtmStdIfConfRowStatus and 
mplsLcAtmStdIfConfStorageType." 

::= { mplsLcAtmStdInterfaceConfEntry 8 } 


mplsLcAtmStdIfConfStorageType OBJECT-TYPE 


SYNTAX StorageType 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"The storage type for this conceptual row. 
Conceptual rows having the value ‘’permanent (4)’ 
need not allow write-access to any columnar 
objects in the row." 

DEFVAL { nonVolatile } 
::= { mplsLcAtmStdInterfaceConfEntry 9 } 


-- End of mplsLcAtmStdInterfaceConfTable 
-- Module compliance. 


mplsLcAtmStdCompliances 


OBJECT IDENTIFIER ::= { mplsLcAtmStdConformance 1 } 
mplsLcAtmStdGroups 
OBJECT IDENTIFIER ::= { mplsLcAtmStdConformance 2 } 


-—- Compliance requirement for full compliance 


mplsLcAtmStdModuleFullCompliance MODULE-COMPLIANCE 
STATUS current 
DESCRIPTION 
"Compliance statement for agents that provide 
full support for MPLS-LC-ATM-STD-MIB. Such 
devices can be monitored and also be configured 
using this MIB module." 
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MODULE -- this module 
MANDATORY-GROUPS { 
mplsLcAtmStdIfGroup 
} 
OBJECT mplsLcAtmStdIfConfRowStatus 
SYNTAX RowStatus { active(l), notInService(2) } 


WRITE-SYNTAX RowStatus { active(1), notInService(2), 
createAndGo (4), destroy (6) 
} 
DESCRIPTION "Support for createAndWait and notReady is 
not required." 


::= { mplsLcAtmStdCompliances 1 } 
-- Compliance requirement for read-only implementations. 


mplsLcAtmStdModuleReadOnlyCompliance MODULE-COMPLIANCE 
STATUS current 
DESCRIPTION 
"Compliance requirement for implementations that only 
provide read-only support for MPLS-LC-ATM-STD-MIB. 
Such devices can be monitored but cannot be configured 
using this MIB module. 
" 
MODULE -- this module 
MANDATORY-GROUPS { 
mplsLcAtmStdIfGroup 
} 


-- mplsLcAtmStdInterfaceConfTable 


OBJECT mplsLcAtmStdCtrlVpi 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcAtmStdCtrlVci 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcAtmStdUnlabTrafVpi 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcAtmStdUnlabTrafVci 
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MIN-ACCESS read-only 
DESCRIPTION 
"Write access is not required." 


OBJECT mplsLcAtmStdVcMerge 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcAtmStdIfConfRowStatus 
SYNTAX RowStatus { active(l) } 
MIN-ACCESS read-only 

DESCRIPTION "Write access is not required." 


OBJECT mplsLcAtmVcDirectlyConnected 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcAtmLcAtmVPI 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcAtmStdIfConfStorageType 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 
:= { mplsLcAtmStdCompliances 2 } 


-- Units of conformance. 


mplsLcAtmStdIfGroup OBJECT-GROUP 

OBJECTS { 
mplsLcAtmStdCtrlVpi, 
mplsLcAtmStdCtrlVci, 
mplsLcAtmStdUnlabTrafVpi, 
mplsLcAtmStdUnlabTrafVci, 
mplsLcAtmStdVcMerge, 
mplsLcAtmVcDirectlyConnected, 
mplsLcAtmLcAtmvVPI, 
mplsLcAtmStdIfConfRowStatus, 
mplsLcAtmStdIfConfStorageType 

} 
STATUS current 
DESCRIPTION 
"Collection of objects needed for MPLS LC-ATM 
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interface configuration." 
::= { mplsLcAtmStdGroups 1 } 


END 
8. MPLS Label-Controlled Frame Relay MIB Definitions 


The following MIB module imports from [RFC2115], [RFC3811], and 
[RFC3813]. 


MPLS-LC-FR-STD-MIB DEFINITIONS ::= BEGIN 
IMPORTS 
MODULE-IDENTITY, OBJECT-TYPE 

FROM SNMPv2-SMI 
MODULE-COMPLIANCE, OBJECT-GROUP 
FROM SNMPv2-CONF 
RowStatus, StorageType 
FROM SNMPv2-TC 
mplsInterfaceIndex 
FROM MPLS-LSR-STD-MIB 
DLCI 
FROM FRAME-RELAY-DTE-MIB 
mplsStdMIB 
FROM MPLS-TC-STD-MIB 


1 
mplsLcFrStdMIB MODULE-IDENTITY 


LAST-UPDATED "200601120000Z" -- 12 January 2006 
ORGANIZATION "Multiprotocol Label Switching (MPLS) Working Group" 
CONTACT-INFO 
" Thomas D. Nadeau 
Cisco Systems, Inc. 
Email: tnadeau@cisco.com 


Subrahmanya Hegde 
Email: subrah@cisco.com 


General comments should be sent to mpls@uu.net 
" 

DESCRIPTION 
"This MIB module contains managed object definitions for 
MPLS Label-Controlled Frame-Relay interfaces as defined 
in (RFC3034). 


Copyright (C) The Internet Society (2006). This 


version of this MIB module is part of RFC 4368; see 
the RFC itself for full legal notices." 
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-—- Revision history. 
REVISION 
"2006011200002" -- 12 January 2006 
DESCRIPTION 
"Initial revision, published as part of RFC 4368." 
::= { mplsStdMIB 10 } 


-- Top level components of this MIB module. 
-- Tables, Scalars, Notifications, Conformance 


mplsLcFrStdNotifications OBJECT IDENTIFIER { mplsLcFrStdMIB 0 } 
mplsLcFrStdObjects OBJECT IDENTIFIER ::= { mplsLcFrStdMIB 1 } 
mplsLcFrStdConformance OBJECT IDENTIFIER { molsLcFrStdMIB 2 } 


—- MPLS LC-FR Interface Configuration Table. 
mplsLcFrStdiInterfaceConfTable OBJECT-TYPE 


SYNTAX SEQUENCE OF MplsLcFrStdIinterfaceConfEntry 
MAX-ACCESS not-accessible 
STATUS current 
DESCRIPTION 
"This table specifies per-interface MPLS LC-FR 
capability and associated information. In particular, 


this table sparsely extends the MPLS-LSR-STD-MIB’s 
mplsInterfaceConfTable." 
::= { mplsLcFrStdObjects 1 } 


mplsLcFrStdiInterfaceConfEntry OBJECT-TYPE 


SYNTAX MplsLcFrStdiInterfaceConfEntry 
MAX-ACCESS not-accessible 

STATUS current 

DESCRIPTION 


"An entry in this table is created by an LSR for 
every interface capable of supporting MPLS LC-FR. 
Each entry in this table will exist only if a 
corresponding entry in ifTable and mplsInterfaceConfTable 
exists. If the associated entries in ifTable and 
mplsInterfaceConfTable are deleted, the corresponding 
entry in this table must also be deleted shortly 
thereafter." 

INDEX { mplsInterfaceIndex } 
::= { mplsLcFrStdInterfaceConfTable 1 } 


MplsLcFrStdiInterfaceConfEntry ::= SEQUENCE { 
mplsLcFrStdTrafficMinDlci DLCI, 
mplsLcFrStdTrafficMaxDlci DLCI, 
mplsLcFrStdCtriMinDlci DLCI, 
mplsLcFrStdCtrilMaxDlci DLCI, 


mplsLcFrStdiInterfaceConfRowStatus RowStatus, 
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mplsLcFrStdiInterfaceConfStorageType StorageType 
} 


mplsLcFrStdTrafficMinDlci OBJECT-TYPE 


SYNTAX DLCI 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"This is the minimum DLCI value over which this 
LSR is willing to accept traffic on this 


interface." 
::= { mplsLcFrStdInterfaceConfEntry 1 } 


mplsLcFrStdTrafficMaxDlci OBJECT-TYPE 


SYNTAX DLCI 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"This is the max DLCI value over which this 
LSR is willing to accept traffic on this 


interface." 
:= { mplsLcFrStdInterfaceConfEntry 2 } 


mplsLcFrStdCtrlMinDlci OBJECT-TYPE 


SYNTAX DLCI 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"This is the min DLCI value over which this 
LSR is willing to accept control traffic 
on this interface." 

::= { mplsLcFrStdInterfaceConfEntry 3 } 


mplsLcFrStdCtr1lMaxDlci OBJECT-TYPE 


SYNTAX DLCI 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"This is the max DLCI value over which this 
LSR is willing to accept control traffic 
on this interface." 

::= { mplsLcFrStdInterfaceConfEntry 4 } 


mplsLcFrStdiInterfaceConfRowStatus OBJECT-TYPE 


SYNTAX RowStatus 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 
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"This object is used to create and 
delete entries in this table. When configuring 
entries in this table, the corresponding ifEntry and 
mplsInterfaceConfEntry MUST exist beforehand. If a manager 
attempts to create an entry for a corresponding 
mplsInterfaceConfEntry that does not support LC-FR, 
the agent MUST return an inconsistentValue error. 
If this table is implemented read-only, then the 
agent must set this object to active(1) when this 
row is made active. If this table is implemented 
writable, then an agent MUST not allow modification 
to its objects once this value is set to active(1), 
except to mplsLcFrStdiInterfaceConfRowStatus and 
mplsLcFrStdiInterfaceConfStorageType." 

:= { mplsLcFrStdInterfaceConfEntry 5 } 


mplsLcFrStdiInterfaceConfStorageType OBJECT-TYPE 


SYNTAX StorageType 
MAX-ACCESS read-create 
STATUS current 
DESCRIPTION 


"The storage type for this conceptual row. 
Conceptual rows having the value ’permanent (4)’ 
need not allow write-access to any columnar 
objects in the row." 

DEFVAL { nonVolatile } 
::= { mplsLcFrStdInterfaceConfEntry 6 } 


-- End of mplsLcFrStdInterfaceConfTable 
-—- Module compliance. 


mplsLcFrStdCompliances 
OBJECT IDENTIFIER 


{ mplsLcFrStdConformance 1 } 


mplsLcFrStdGroups 
OBJECT IDENTIFIER ::= { mplsLcFrStdConformance 2 } 


-—- Compliance requirement for full compliance 


mplsLcFrStdModuleFullCompliance MODULE-COMPLIANCE 
STATUS current 
DESCRIPTION 
"Compliance statement for agents that provide 
full support for MPLS-LC-FR-STD-MIB. Such 
devices can be monitored and also be configured 
using this MIB module." 


Nadeau & Hegde Standards Track [Page 15] 


RFC 4368 MPLS LC ATM and FR MIBs January 2006 


MODULE -- this module 
MANDATORY-GROUPS { 
mplsLcFrStdIfGroup 
} 


OBJECT mplsLcFrStdiInterfaceConfRowStatus 
SYNTAX RowStatus { active(l), notInService(2) } 
WRITE-SYNTAX RowStatus { active(1), notInService(2), 
createAndGo (4), destroy (6) 
} 
DESCRIPTION "Support for createAndWait and notReady is 
not required." 


::= { mplsLcFrStdCompliances 1 } 


-- Compliance requirement for read-only implementations. 


mplsLcFrStdModuleReadOnlyCompliance MODULE-COMPLIANCE 
STATUS current 
DESCRIPTION 
"Compliance requirement for implementations that only 
provide read-only support for MPLS-LC-FR-STD-MIB. 
Such devices can be monitored but cannot be configured 
using this MIB module. 


MODULE -- this module 
MANDATORY-GROUPS { 
mplsLcFrStdIfGroup 


} 


-- mplsLcFrStdInterfaceConfTable 


OBJECT mplsLcFrStdTrafficMinDlci 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcFrStdTrafficMaxDlci 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcFrStdCtrlMinDlci 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 
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MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 


OBJECT mplsLcFrStdInterfaceConfRowStatus 
SYNTAX RowStatus { active(l) } 
MIN-ACCESS read-only 

DESCRIPTION "Write access is not required." 


OBJECT mplsLcFrStdiInterfaceConfStorageType 
MIN-ACCESS read-only 
DESCRIPTION 


"Write access is not required." 
:= { mplsLcFrStdCompliances 2 } 


-- Units of conformance. 


mplsLcFrStdIfGroup OBJECT-GROUP 

OBJECTS { 
mplsLcFrStdTrafficMinDlci, 
mplsLcFrStdTrafficMaxDlci, 
mplsLcFrStdCtrlMinDlici, 
mplsLcFrStdCtrlMaxDlci, 
mplsLcFrStdiInterfaceConfRowStatus, 
mplsLcFrStdiInterfaceConfStorageType 

} 
STATUS current 


DESCRIPTION 
"Collection of objects needed for MPLS LC-FR 
interface configuration." 


::= { mplsLcFrStdGroups 1 } 


END 
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10. Security Considerations 


It is clear that these MIB modules are potentially useful for 
monitoring MPLS LSRs supporting LC-ATM and/or LC-FR. These MIBs can 
also be used for configuration of certain objects, and anything that 
can be configured can be incorrectly configured, with potentially 
disastrous results. 


There are a number of management objects defined in this MIB module 
with a MAX-ACCESS clause of read-write and/or read-create. Such 
objects may be considered sensitive or vulnerable in some network 
environments. The support for SET operations in a non-secure 
environment without proper protection can have a negative effect on 
network operations. These are the tables and objects and their 
sensitivity/vulnerability: 


fe) the MplsLcAtmStdInterfaceConfTable and 
mplsLcFrStdInterfaceConfTable collectively contain objects that 
may be used to provision MPLS LC or FR-enabled interfaces. 
Unauthorized access to objects in these tables could result in 
disruption of traffic on the network. This is especially true 
if traffic has been established over these interfaces. The use 
of stronger mechanisms such as SNMPv3 security should be 
considered where possible. Specifically, SNMPv3 VACM and USM 
MUST be used with any v3 agent that implements this MIB module. 
Administrators should consider whether read access to these 
objects should be allowed, since read access may be undesirable 
under certain circumstances. 


Some of the readable objects in this MIB module (i.e., objects with a 
MAX-ACCESS other than not-accessible) may be considered sensitive or 
vulnerable in some network environments. It is thus important to 
control even GET and/or NOTIFY access to these objects and possibly 
to even encrypt the values of these objects when sending them over 
the network via SNMP. These are the tables and objects and their 
sensitivity/vulnerability: 


fe) the MplsLcAtmStdInterfaceConfTable and 
mplsLcFrStdInterfaceConfTable collectively show the LC-ATM 
and/or LC-FR interfaces, their associated configurations, and 
their linkages to other MPLS-related configuration and/or 
performance statistics. Administrators not wishing to reveal 
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this information should consider these objects 
sensitive/vulnerable and take precautions so they are not 
revealed. 


SNMP versions prior to SNMPv3 did not include adequate security. 

Even if the network itself is secure (for example by using IPSec), 
even then, there is no control as to who on the secure network is 
allowed to access and GET/SET (read/change/create/delete) the objects 
in this MIB module. 


It is RECOMMENDED that implementers consider the security features as 
provided by the SNMPv3 framework (see [RFC3410], section 8), 
including full support for the SNMPv3 cryptographic mechanisms (for 
authentication and privacy). 


Further, deployment of SNMP versions prior to SNMPv3 is NOT 
RECOMMENDED. Instead, it is RECOMMENDED to deploy SNMPv3 and to 
enable cryptographic security. It is then a customer/operator 
responsibility to ensure that the SNMP entity giving access to an 
instance of this MIB module, is properly configured to give access to 
the objects only to those principals (users) that have legitimate 
rights to indeed GET or SET (change/create/delete) them. 


IANA Considerations 


As described in and as requested in the MPLS-TC-STD-MIB [RFC3811], 
MPLS-related standards track MIB modules should be rooted under the 
mplsStdMIB subtree. There are 2 MPLS MIB modules contained in this 
document; each of the following "IANA Considerations" subsections 
requested from IANA a new assignment under the mplsStdMIB subtree. 
New assignments can only be made via a Standards Action as specified 
in [RFC2434]. 


T IANA Considerations for MPLS-LC-ATM-STD-MIB 


The IANA has assigned { mplsStdMIB 9 } to the MPLS-LC-ATM-STD-MIB 
module specified in this document. 


oZy IANA Considerations for MPLS-LC-FR-STD-MIB 


The IANA has assigned { mplsStdMIB 10 } to the MPLS-LC-FR-STD-MIB 
module specified in this document. 
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